Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa
File:                     3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          Mv60btY6Nr6rG1RG2dlon9WCWNYGgHhPxOSr+E9TNkI=
Subject key identifier:   97:DE:A9:1A:B5:EA:38:1C:1C:4E:E1:1C:F1:79:D8:97:94:35:47:20
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       2E5E467F986BFCDE48D116343A6421A6239F384E
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa
Signing time:             Thu 04 Apr 2024 01:08:40 +0000
ROA not before:           Thu 04 Apr 2024 01:03:40 +0000
ROA not after:            Thu 03 Apr 2025 01:08:40 +0000
asID:                     263101
IP address blocks:        186.225.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5e:46:7f:98:6b:fc:de:48:d1:16:34:3a:64:21:a6:23:9f:38:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Apr  4 01:03:40 2024 GMT
            Not After : Apr  3 01:08:40 2025 GMT
        Subject: CN=97DEA91AB5EA381C1C4EE11CF179D89794354720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:d5:08:fd:8d:e2:2c:e1:7e:bd:5e:f8:c0:
                    c7:b5:35:70:ae:12:1c:3a:17:59:74:7c:2b:b0:95:
                    1a:2a:4f:27:c6:15:84:52:09:91:1c:af:08:66:a4:
                    f9:4d:27:4d:10:d6:2f:41:8f:e5:d5:d9:fa:71:87:
                    ae:f3:70:f2:15:90:64:7e:d0:06:ad:32:12:04:0f:
                    a4:47:ea:d2:54:cb:88:48:87:ab:17:95:c1:17:50:
                    89:69:ff:f8:cc:85:a4:e7:c0:36:cc:17:43:98:6e:
                    d8:a7:09:4e:65:75:b5:6f:dd:bb:be:5b:2f:67:64:
                    65:12:7d:77:03:29:87:f6:92:00:35:f3:89:67:a6:
                    0e:8a:90:88:cf:94:cc:f4:f4:8f:a4:46:e2:ad:3d:
                    da:3f:63:2a:f1:af:80:48:f4:56:69:15:2c:39:0e:
                    c4:93:15:20:58:4a:9d:a9:4e:10:e1:f8:74:12:43:
                    35:92:08:82:86:51:08:c3:e1:00:7b:72:0e:40:21:
                    14:2d:22:84:ea:65:4a:4a:ac:69:a5:b5:3c:28:34:
                    ae:74:ef:5b:13:dd:87:70:d5:61:d0:4f:52:de:c3:
                    d0:38:ab:0e:c9:bb:30:5e:d5:f3:12:92:13:a8:35:
                    55:74:86:da:8e:5b:ae:66:10:bb:26:03:a0:9b:4b:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DE:A9:1A:B5:EA:38:1C:1C:4E:E1:1C:F1:79:D8:97:94:35:47:20
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32342d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:1c:0d:c0:a0:f8:c1:e0:95:76:61:3a:2a:9b:13:1a:b8:17:
         b5:28:18:5b:62:7a:12:00:bf:a5:5b:b9:4c:a8:97:f2:32:08:
         b5:c6:39:b2:ca:1f:8b:2c:84:b1:3d:b5:12:b0:f8:18:4a:c0:
         3a:85:a1:fe:03:1f:28:f4:70:a4:9a:18:d8:d3:e5:99:73:6f:
         c3:87:4c:bb:34:6c:50:d9:7d:1e:9d:54:1f:f8:87:5a:f4:2a:
         65:db:bf:24:d7:40:91:c7:3f:ce:7f:9f:a9:95:48:58:fb:52:
         f0:3e:2b:16:6e:b9:ac:95:de:e8:97:ce:83:d5:33:4e:c8:fc:
         86:8b:d7:53:f0:a4:89:8d:35:0b:35:da:48:2a:11:2e:5a:42:
         83:b3:92:d7:a5:f3:5f:27:d3:02:9b:aa:f3:c4:fa:2d:4f:e9:
         50:6c:d9:69:8f:86:f9:38:15:ae:7b:7f:9c:48:1d:6d:37:f5:
         5a:cb:62:dd:95:8b:1f:cf:18:e2:47:74:76:fd:a8:9c:a0:ad:
         6b:65:b8:1b:e3:11:76:f1:8d:f4:9f:95:5b:8d:d8:3b:90:d8:
         7d:cb:f1:31:5d:fa:42:23:59:37:cd:c8:50:31:3c:02:87:82:
         c7:11:a7:59:99:c8:7c:22:4b:39:6f:98:d0:b7:57:5f:14:97:
         e0:5e:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org